Behavioral task
behavioral1
Sample
674454a59d4a276fd9909c0918914aea_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
674454a59d4a276fd9909c0918914aea_JaffaCakes118
-
Size
322KB
-
MD5
674454a59d4a276fd9909c0918914aea
-
SHA1
e75ef9f145640b75384799ee56b88d8fbadd439e
-
SHA256
236bb890267a22dd629c24a9bcc5916eb30c04a066892478fc0f5b005f38e2d4
-
SHA512
b092ce743d5ef7adc1cb91203e9558932e5b7671b7cb4699352135f981956576379ba6c66681796371831169da2c7f3d6ace3a03ba53eb1d755c73c7eb4725bc
-
SSDEEP
6144:wpcM9n6ZBj1QQQzry17ClrFpEvzp2ALiZ1375lAfdKremshh7N99oSCoOt:7RBjayo1Fmvzp5Lq137bAWsht39oSCo+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 674454a59d4a276fd9909c0918914aea_JaffaCakes118
Files
-
674454a59d4a276fd9909c0918914aea_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 249KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE